CVE-2011-3351: Openvas Openvas-Scanner

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system.

Affected products

• Openvas Openvas-Scanner: before 2011-09-11 (fixed in 2011-09-11)

Published 2019-11-25. Last modified 2026-06-16.